Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
Topic Last Modified: 2011-03-19
Use Send As permissions to configure a mailbox so that users other than the mailbox owner can use that mailbox to send messages. After this permission is granted, any messages that are sent from the mailbox will appear as if they were sent by the mailbox owner.
The Send As permission isn't granted until after replication has occurred. Replication times depend on your Exchange and network configuration. To grant the permission immediately, stop and then restart the Microsoft Exchange Information Store service.
Also, before you perform this procedure, be aware that you cannot send e-mail messages on behalf of a mailbox if the mailbox is hidden from address lists. When sending a message, Exchange requires that an e-mail address is resolved in the From field. In the case where a message is sent on behalf of a mailbox that is hidden from address lists, the SMTP address is interpreted as an address that isn't from your organization (known as a foreign address) and is rejected. For information about how to change your mailbox settings, see Configure User and Resource Mailbox Properties.
In Outlook, users will receive the following errors when attempting to send a message on behalf of a mailbox that is hidden from address lists:
- Online mode When users press
Send, they will receive the following error: "You do not
have permission to send on behalf of the specified user."
- Cached Exchange Mode Outlook initially
sends the message, but users will receive a non-delivery report
(NDR) containing the following message: "You are not allowed to
send this message because you are trying to send on behalf of
another user without permission to do so. Please verify that you
are sending on behalf of the correct sender, or ask your system
administrator to help you get the required permission."
Looking for other management tasks related to mailbox permissions? Check out Permissions to Manage Mailbox Servers.
What Do You Want to Do?
Use the EMC to manage Send As permissions for a mailbox
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Send As permissions" entry in the Mailbox Permissions topic.
- In the console tree, click Recipient Configuration.
- In the result pane, select a recipient. You can manage Send As
permission for the following recipient types:
- Discovery mailboxes
- User mailboxes
- Resource mailboxes
- Discovery mailboxes
- In the action pane, click Manage Send As Permission.
- On the Manage Send
As Permission page, select the users or groups to which you
want to grant the Send As permission or from which you want to
remove the permission.
- Add Click this button to open the
Select User or Group dialog box. Use this dialog box to
select the users or groups to which you want to grant the Send As
permission.
Select a user or group, and
then click this button to remove the Send As permission from that
user or group.
- Add Click this button to open the
Select User or Group dialog box. Use this dialog box to
select the users or groups to which you want to grant the Send As
permission.
- On the
Completion page, review the following, and then click
Finish to close the wizard:
- A status of Completed indicates that the wizard
completed the task successfully.
- A status of Failed indicates that the task wasn't
completed. If the task fails, review the summary for an
explanation, and then click Back to make any configuration
changes.
- A status of Completed indicates that the wizard
completed the task successfully.
- Click Finish close the wizard.
Use the Shell to manage Send As permissions for a mailbox
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Send As permissions" entry in the Mailbox Permissions topic.
Use the Add-ADPermission cmdlet to manage Send As permissions for a mailbox. When you use the Add-ADPermission cmdlet, you must specify the name of the mailbox on which the Send As permission should be added and the mailbox that should be granted the permission. Because the Add-ADPermission cmdlet controls many permissions, you must also specify the Send As permission with the ExtendedRights parameter. For example, to add the Send As permission to contoso\kim on the user mailbox John Simpson, use the following command:
 Copy Code |
|
|---|---|
Add-ADPermission "John Simpson" -User "Domain\User" -Extendedrights "Send As" |
|
For detailed syntax and parameter information, see Add-ADPermission.